Exclude threats from the potential threat list

Based on the investigation analysis if the threat is non-malicious, you can exclude the particular threat from the potential threat list. Once the threat is excluded, even if detected again, it is not added back to the threat list.

Note

The maximum number of threats that can be excluded from showing on either the Monitoring dashboard or the Configuration dashboard is 1500. We recommend you avoid creating threat exclusions, except in specific cases, because they can result in missed detections.

You can use the following methods for threat exclusion from the potential threat list: